India's data privacy era is here. Be the firm that leads your clients through it. Join the truConsent Partner Program →

Module 02 Mandatory (M)

Consent Engine

The most configurable DPDPA-native consent management available, covering every consent scenario the Act requires.

Overview

The Consent Engine models consent the way the DPDP Act actually works — not the way GDPR banners work. A two-dimensional matrix handles Legitimate Use vs Business Case across One-time and Recurring processing, determining for each scenario whether notice alone suffices or explicit consent with withdrawal rights is required.

Notices are generated from your actual data map (from DPDP Navigator), delivered across all 22 Eighth Schedule languages, and accessible via NPM, SDK, API, or a no-code link. Every consent event is logged with an immutable receipt. When purposes change, refresh workflows re-engage the right Data Principals automatically.

Consent Engine — Two-dimensional DPDPA consent handling

Capabilities

What's inside

Two-Dimensional Consent Matrix

Models every consent scenario across use-case type (Legitimate Use vs Business Case) and frequency (One-time vs Recurring) — so the right consent mechanism is applied every time, and withdrawal obligations are never missed.

Consent Types

General Adult, Verifiable Parental Consent, and Cookie Consent are production-ready. The system handles each type's distinct notice, approval, and withdrawal requirements.

Notice Builder

Generates DPDPA-compliant consent notices from your actual data map. Supports Doc-to-Config (legal to deployment) and Config-to-Doc (deployment to audit export) workflows.

Multilingual Delivery

Consent notices reach every Data Principal in the language they actually read — all 22 languages listed in the Eighth Schedule of the Constitution of India.

Multi-Channel Integration

Deploy via NPM packages for web, SDK for Android and iOS, REST APIs for backend systems, or a no-code Consent Link Generator — without requiring engineering involvement.

Expiry & Re-consent

Configurable expiry periods, bulk pre-expiry notifications, and automated re-consent campaigns when processing purposes change — aligned with Section 8(7) retention requirements.

Immutable Consent Logs

Every grant, decline, withdrawal, and refresh is logged with a cryptographic receipt — exportable as regulatory evidence on demand.

Explore other modules

Module 01

DPDP Navigator

Discover where personal data lives across your technology stack before you build your compliance programme.

Module 03

Rights Center

A complete, interoperable portal for every Data Principal right the DPDP Act requires.

Module 04

Compliance Center

Policy management and breach response, with AI doing the heavy lifting and humans making the decisions.

Module 05

Audits & Assessments

Give your auditors the tools they need and keep your compliance posture current between reviews.

Module 06

Data Processor Management

Manage every Data Processor relationship the DPDP Act holds you accountable for.

Module 07

Security Safeguards

Build and demonstrate the reasonable security safeguards Section 8(5) requires.

Ready to Achieve DPDPA Compliance?

Be among the first to implement comprehensive DPDPA compliance

Subscribe to our newsletter and stay updated on DPDPA compliance insights.

By subscribing, you agree to receive updates from TruConsent.Unsubscribe anytime.
Protected by reCAPTCHA

Cookie Consent

We use cookies to enhance your browsing experience, analyze site traffic, and personalize content. By clicking "Accept All", you consent to our use of cookies. You can manage your preferences or decline non-essential cookies by clicking "Decline".